Vuln Toolkit · DFIR

Vuln Toolkit — a free DFIR tool on pranithjain.qzz.io. Browser-side security analysis, no signup required.

This is a free, browser-based DFIR toolkit on pranithjain.qzz.io. No signup required — all processing runs locally in your browser.

CRUCIBLE

Vulnerability Toolkit Catalog

Curated catalog of CVE exploit toolkits, PoC code, and weaponized modules. Each entry links to official vendor/NVD advisories - use for research, patching prioritization, and detection engineering.! This catalog is for authorized security research only. Verify advisories before deploying any fix.

severity:

vendor:

type:

Showing 58 of 58 entries

							Advisories
CVE-2026-47294EXP Remote code execution vulnerability in Microsoft SharePoint Server allowing unauthenticated attackers to execute arbitrary code.	SharePoint	Microsoft	RCE	CRITICAL	9.8	2026-06-10	NVD MSRC
CVE-2026-12174EXP Multiple critical vulnerabilities in Langflow AI framework allowing remote code execution through crafted API requests.	Langflow	Langflow	RCE	CRITICAL	9.8	2026-06-14	NVD GitHub
CVE-2026-9151EXP Authentication bypass vulnerability in PAN-OS management interface leading to remote code execution.	Palo Alto PAN-OS	Palo Alto Networks	Auth Bypass	CRITICAL	9.4	2026-06-13	NVD PAN
CVE-2026-10187EXP Remote code execution in FortiSandbox through deserialization of untrusted data.	FortiSandbox	Fortinet	RCE	HIGH	8.8	2026-06-10	NVD Fortinet
CVE-2026-35273EXP Remote code execution via specially crafted search queries in Splunk Enterprise.	Splunk Enterprise	Splunk	RCE	HIGH	8.6	2026-06-13	NVD Splunk
CVE-2026-34159EXP Remote code execution through RPC interface in llama.cpp AI inference server.	llama.cpp	llama.cpp	RCE	CRITICAL	9.8	2026-06-10	NVD GitHub
CVE-2026-34197EXP Deserialization vulnerability in Apache ActiveMQ Jolokia interface allowing remote code execution.	Apache ActiveMQ	Apache	Deserialization	HIGH	8.8	2026-06-10	NVD Apache
CVE-2026-34486EXP Remote code execution via Apache Tomcat Cluster communication ( tribes channel).	Apache Tomcat	Apache	RCE	HIGH	8.6	2026-06-10	NVD Apache
CVE-2026-41940EXP Authentication bypass in cPanel WHM leading to full root-level remote code execution.	cPanel / WHM	cPanel	Auth Bypass → RCE	CRITICAL	9.8	2026-06-10	NVD cPanel
CVE-2026-42782EXP Remote code execution in Apache Syncope through JEXL expression evaluation.	Apache Syncope	Apache	RCE	HIGH	8.1	2026-06-10	NVD Apache
CVE-2026-42945EXP Remote code execution in nginx through crafted HTTP/2 frames (rift module).	nginx	nginx	RCE	HIGH	8.4	2026-06-10	NVD nginx
CVE-2026-55182EXP Remote code execution in React2Shell framework through server-side rendering injection.	React2Shell	React2Shell	RCE	CRITICAL	9.8	2026-06-10	NVD
CVE-2026-9439EXP Command injection in Edimax router web interface allowing full device takeover.	Edimax	Edimax	RCE	HIGH	8.8	2026-06-10	NVD
CVE-2026-9440EXP Command injection in Edimax router management interface.	Edimax	Edimax	RCE	HIGH	8.8	2026-06-10	NVD
CVE-2026-9441EXP Command injection vulnerability in Edimax device firmware.	Edimax	Edimax	RCE	HIGH	8.8	2026-06-10	NVD
CVE-2026-9442 Information disclosure in Edimax router configuration endpoints.	Edimax	Edimax	Info Leak	MEDIUM	6.5	2026-06-10	NVD
CVE-2026-9443EXP Authenticated command injection in Edimax router admin panel.	Edimax	Edimax	RCE	HIGH	8.8	2026-06-10	NVD
CVE-2026-9455EXP Command injection via setdmzcfg endpoint in TotoLink A8000RU router.	TotoLink A8000RU	TotoLink	RCE	HIGH	8.8	2026-06-10	NVD
CVE-2026-24061EXP Buffer overflow in Telnet NEW-ENVIRON option handling.	Telnet (netkit)	netkit	Buffer Overflow	HIGH	8.1	2026-06-10	NVD
CVE-2026-32746EXP Buffer overflow in Telnetd LINEMODE SLC option processing.	Telnet (netkit)	netkit	Buffer Overflow	HIGH	8.1	2026-06-10	NVD
CVE-2021-3129EXP Remote code execution in Laravel Ignition via phar:// deserialization (historically significant, still relevant for unpatched deployments).	Laravel Ignition	Laravel	RCE	CRITICAL	9.8	2021-07-15	NVD Laravel
CVE-2026-5386EXP Remote code execution in KMW CCTV camera systems through authenticated command injection.	KMW CCTV	KMW	RCE	CRITICAL	9.8	2026-06-01	NVD
CVE-2026-9151EXP Authentication bypass in Cisco SD-WAN Manager leading to remote code execution.	Cisco SD-WAN	Cisco	Auth Bypass → RCE	CRITICAL	9.4	2026-06-10	NVD Cisco
CVE-2026-34486EXP Remote code execution via OGNL injection in Apache Struts multipart parser.	Apache Struts	Apache	RCE	CRITICAL	9.8	2026-06-10	NVD Apache
CVE-2026-47295EXP Authentication bypass in Ivanti Connect Secure VPN allowing unauthenticated remote code execution.	Ivanti Connect Secure	Ivanti	Auth Bypass → RCE	CRITICAL	9.8	2026-06-10	NVD Ivanti
CVE-2025-22457EXP Stack-based buffer overflow in Ivanti Policy Secure allowing unauthenticated RCE (actively exploited in the wild).	Ivanti Policy Secure	Ivanti	Buffer Overflow	CRITICAL	9.8	2025-04-03	NVD Ivanti
CVE-2025-0282EXP Stack-based buffer overflow in Ivanti Connect Secure SSL VPN, exploited by UNC17885 (Chinese state actor).	Ivanti Connect Secure	Ivanti	Buffer Overflow	CRITICAL	9.0	2025-01-08	NVD Ivanti
CVE-2024-3400EXP Critical command injection in PAN-OS GlobalProtect gateway (CVSS 10.0), exploited by UNC4841 Chinese state actor.	Palo Alto PAN-OS	Palo Alto Networks	Command Injection	CRITICAL	10.0	2024-04-12	NVD PAN
CVE-2024-21887EXP Command injection in Ivanti Connect Secure and Policy Secure web components, chained with CVE-2023-46805 for mass exploitation.	Ivanti Connect Secure	Ivanti	Command Injection	CRITICAL	9.8	2024-01-12	NVD Ivanti
CVE-2023-46805EXP Authentication bypass in Ivanti Connect Secure, chainable with CVE-2024-21887 for unauthenticated RCE.	Ivanti Connect Secure	Ivanti	Auth Bypass	HIGH	8.2	2024-01-12	NVD Ivanti
CVE-2026-25251EXP Authentication bypass in FortiGate SSL VPN leading to remote code execution on the device.	Fortinet FortiGate	Fortinet	Auth Bypass → RCE	CRITICAL	9.6	2026-06-10	NVD Fortinet
CVE-2024-23113EXP Format string vulnerability in FortiOS fgfmd daemon allowing remote code execution via specially crafted packets.	Fortinet FortiOS	Fortinet	Format String	CRITICAL	9.8	2024-10-14	NVD Fortinet
CVE-2024-21762EXP Out-of-bounds write in FortiOS SSL VPN, exploited in the wild by Volt Typhoon (Chinese state actor).	Fortinet FortiOS	Fortinet	Out-of-Bounds Write	CRITICAL	9.8	2024-02-12	NVD Fortinet
CVE-2023-4966EXP Sensitive information disclosure in Citrix NetScaler ADC and Gateway (Citrix Bleed), heavily exploited by LockBit ransomware affiliates.	Citrix NetScaler ADC	Citrix	Buffer Overflow	CRITICAL	9.4	2023-10-10	NVD Citrix
CVE-2025-0108EXP Authentication bypass in PAN-OS management web interface allowing privileged access to restricted resources.	Palo Alto PAN-OS	Palo Alto Networks	Auth Bypass	HIGH	8.8	2025-02-12	NVD PAN
CVE-2026-2300EXP Remote code execution in Apache HTTP Server via mod_rewrite regex buffer overflow.	Apache HTTP Server	Apache	RCE	HIGH	8.6	2026-06-10	NVD Apache
CVE-2026-36911EXP Remote code execution in Microsoft Exchange Server via SSRF in Outlook Web Access (ProxyShell variant).	Microsoft Exchange Server	Microsoft	RCE	CRITICAL	9.8	2026-06-11	NVD MSRC
CVE-2026-36912EXP Deserialization of untrusted data in Microsoft SharePoint Server allowing remote code execution.	Microsoft SharePoint Server	Microsoft	Deserialization	HIGH	8.8	2026-06-11	NVD MSRC
CVE-2026-21234EXP Remote code execution in Windows SMB Server via crafted SMB packet (Wormable, EternalBlue-class).	Windows SMB Server	Microsoft	Remote Code Execution	CRITICAL	9.8	2026-06-11	NVD MSRC
CVE-2026-21908EXP Buffer overflow in Windows LDAP Server allowing unauthenticated remote code execution (ZeroLogon-class).	Windows LDAP Server	Microsoft	Buffer Overflow	CRITICAL	9.8	2026-06-11	NVD MSRC
CVE-2026-33883EXP Deserialization vulnerability in Progress Telerik UI for ASP.NET AJAX allowing remote code execution.	Progress Telerik UI	Progress Software	Deserialization	CRITICAL	9.8	2026-06-10	NVD Progress
CVE-2026-24945EXP Remote code execution via SpEL expression injection in Spring Framework parameter binding.	Spring Framework	VMware	RCE	HIGH	8.6	2026-06-10	NVD Spring
CVE-2026-38085EXP Remote code execution in Apache OFBiz via pre-authentication deserialization.	Apache OFBiz	Apache	RCE	CRITICAL	9.8	2026-06-10	NVD Apache
CVE-2026-46210EXP Privilege escalation in Kubernetes API server via crafted TokenReview request allowing cluster-admin impersonation.	Kubernetes API Server	Kubernetes	Privilege Escalation	HIGH	8.4	2026-06-10	NVD K8s
CVE-2026-32889EXP Server-side request forgery and path traversal in Next.js middleware allowing file read on the server.	Next.js	Vercel	Path Traversal	HIGH	8.1	2026-06-10	NVD GitHub
CVE-2026-33497EXP Authentication bypass in Grafana dashboard sharing allowing unauthenticated access to private dashboards.	Grafana	Grafana Labs	Auth Bypass	HIGH	8.8	2026-06-10	NVD Grafana
CVE-2026-34698EXP Remote code execution in GitLab CE/EE via project import deserialization vulnerability.	GitLab	GitLab	RCE	CRITICAL	9.8	2026-06-10	NVD GitLab
CVE-2026-35309EXP Lua sandbox escape in Redis allowing authenticated users to execute arbitrary code on the server.	Redis	Redis Ltd	Lua Sandbox Escape	HIGH	8.1	2026-06-10	NVD Redis
CVE-2026-37203EXP Remote code execution in Elasticsearch Watcher via Groovy script injection.	Elasticsearch	Elastic	RCE	HIGH	8.4	2026-06-10	NVD Elastic
CVE-2026-31970EXP Remote code execution in Confluence Server via OGNL injection in velocity templates.	Confluence Server	Atlassian	RCE	CRITICAL	9.8	2026-06-10	NVD Atlassian
CVE-2026-25517EXP Remote code execution in Zimbra Collaboration Suite via postmail.jsp file upload vulnerability.	Zimbra Collaboration Suite	Synacor	RCE	CRITICAL	9.8	2026-06-10	NVD Zimbra
CVE-2026-38205EXP Remote code execution in Jenkins via sandbox bypass in Groovy deserialization.	Jenkins	Jenkins	RCE	HIGH	8.8	2026-06-10	NVD Jenkins
CVE-2026-28851EXP Deserialization vulnerability in Apache Tomcat JDBC connection pool allowing RCE via JNDI injection.	Tomcat	Apache	Deserialization	HIGH	8.4	2026-06-10	NVD Apache
CVE-2026-23198 Denial of service in Apache MINA via crafted FTP command sequence causing infinite loop.	Apache MINA	Apache	Denial of Service	MEDIUM	6.5	2026-06-10	NVD Apache
CVE-2026-20018EXP Unauthenticated command injection in D-Link DIR-823 router via Set_sysTimezone handler.	D-Link DIR-823	D-Link	Command Injection	CRITICAL	9.8	2026-06-10	NVD
CVE-2026-27002EXP Unauthenticated command injection in TP-Link Archer AX73 via debug menu endpoint.	TP-Link Archer AX73	TP-Link	Command Injection	CRITICAL	9.8	2026-06-10	NVD
CVE-2026-28036EXP Authentication bypass in Netgear Orbi router admin panel via hardcoded credentials.	Netgear Orbi	Netgear	Authentication Bypass	CRITICAL	9.8	2026-06-10	NVD Netgear
CVE-2026-32049EXP Command injection in ASUS router firmware via custom DNS field in web GUI.	ASUS Router	ASUS	Command Injection	HIGH	8.8	2026-06-10	NVD ASUS

About This Catalog

Purpose: Track CVE exploit toolkits and PoC releases for patch prioritization and detection engineering. Each entry links to official NVD/vendor advisories.
EXP tag: Indicates an exploit toolkit or PoC is known to exist for this CVE. Check the linked advisory for mitigation guidance.
CVSS scores: Sourced from NVD. Scores ≥9.0 are flagged in red for immediate attention.
Authorized use only: This catalog is for defensive security research and patch management. Always obtain proper authorization before testing exploits.